IN THE CLAIMS 

Please amend the claims as follows: 

1. (Previously Presented) An apparatus comprising: 

a. a user terminal containing a client application which 
generates a service request; 

b. a service application which is located in a computer 
other than said user terminal responsively coupled to 
said client application which responds to said service 
application; 

c. a communication class library which regulates 
communications between said client application and said 
service application; 

d. a security facility embedded within said communication 
class library; and 

e. wherein said security facility is automatically 
activated by said service request. 

2. (Original) The apparatus of claim 1 wherein said 
security facility further comprises an encryption object. 

3. (Original) The apparatus of claim 2 wherein said 
security facility further comprises security support provider 
interface. 
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4. (Original) The apparatus of claim 3 wherein said 
security facility further comprises a decryption object. 

5. (Previously Presented) The apparatus of claim 4 wherein 
said user terminal is responsively coupled to a data base 
management system via a publically accessible digital data 
communication network and wherein said service application is 
located within said data base management system. 

6. (Previously Presented) A method of handling a service 
request from a client application to a service application, 
comprising: 

a. embedding a security facility within a communication 
class library; 

b. generating a service request within a user terminal using 
said client application; 

c. transferring said service request from said client 
application to said service application located within a 
computer which is different from said user terminal; 

d. receiving said service request by said service 
application; 

e. honoring said service request by said service 
application; and 
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f. automatically implementing security functions from said 
embedded security facility during said step which honors 
said service request. 

7. (Original) A method according to claim 6 further comprising 
a context token transferred from said client to said service 
application identifying required security functions from said 
embedded security facility. 

8. (Original) A method according to claim 7 wherein said 
transferring step further comprises transferring said service 
request to said service application via a publically accessible 
digital data communication network. 

9. (Previously Presented) A method according to claim 8 wherein 
said client application is located within said user terminal. 

10. (Original) A method according to claim 9 further comprising 
a data base management system wherein said service application is 
located within said data base management system. 

11. (Currently Amended) An apparatus comprising: 

a. means for generating a service request requiring security 
functions including a user terminal computer ; 
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b. means responsively coupled to said generating means for 
honoring said service request while providing said security 
functions including a computer other than said user terminal 
computer ; and 

c. means responsively coupled to said honoring means for 
embedding a security facility within a communication class 
library which provides said security functions. 

12. (Original) An apparatus according to claim 11 further 
comprising means for uniquely identifying said security functions 
via a context token. 

13. (Original) An apparatus according to claim 12 wherein said 
context token is transferred to said honoring means from said 
generating means in association with said service request. 

14. (Original) An apparatus according to claim 13 wherein said 
honoring means further comprises a data base management system. 

15. (Original) An apparatus according to claim 14 wherein said 
generating means further comprises a user terminal. 

16. (Currently Amended) [[In a]] A data processing system having 
comprising: 



5 



a. a client application^ [[and]] 

b. a user terminal containing said client application which 
generates a service request requiring security activity 
responsively coupled to a service application^ 7 — the improvement 
comprising : 

[ [a] ] c. ■ a security facility embedded within a 
communication class library responsively coupled to said service 
application; and 

[ [b] ] d. a context token which specifies said security 

activity to said security facility. 

17. (Currently Amended) The improvement data processing system 
according to claim 16 wherein said context token is transferred 
from said client application to said service application along 
with said service request. 

18. (Currently Amended) The improvement data processing system 
according to claim 17 wherein said user terminal contains said 
client application. 

19. (Currently Amended) The improvement data processing system 
according to claim 18 further comprising a publically accessible 
digital data communication network responsively coupled between 
said user terminal and said service application. 
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20. (Currently Amended) The improvement data processing system 
according to claim 19 further comprising a data base management 
system containing said service application. 

21. (Original) An apparatus comprising: 

a. a user terminal which has a client application which 
generates a service request; 

b. an enterprise data base management system having a 
service application responsively coupled to said client 
application via a publically accessible digital data 
communication network which responds to said service 
request; 

c. a communication class library which regulates 
communication between said client application and said 
service application; 

d. a security facility embedded within said communication 
class library; and 

e. wherein said security facility has an encryption object 
and has a decryption object and has a security support 
provider interface and wherein said security facility is 
automatically activated by sad service request. 
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